This is an old revision of the document!


FreeBSD Update is a binary update mechanism for FreeBSD's “base” distribution. It consists of a server and client component

# fetch http://update.freebsd.org/12.0-RELEASE/amd64/pub.ssl     # Get public key. Verify the signature yourself [*]
# fetch http://update.freebsd.org/12.0-RELEASE/amd64/latest.ssl  # Get metadata

# openssl rsautl -pubin -inkey pub.ssl -verify <latest.ssl

[*] Verify pub.ssl with the hash value already exists in your system. Check the output of these two lines are identical:

sha256 -q pub.ssl
grep KeyPrint /etc/freebsd-update.conf | cut -f 2 -w

Output looks like:

freebsd-update|amd64|12.0-RELEASE|10|cae42a89f90be555b530a759cd400925bce03ed73ee78e665bef3fe5293e872f|1576022400


“10” in the output of this example refers to p10, the 10th patch level for 12.0-RELEASE amd64

  • freebsd_update.1568102185.txt.gz
  • Last modified: 2019/09/10 07:56
  • by LiWenHsu